access control - created from Mind Map

Página 1

access control principles

information classification

access control system

acces control types

access control categories

access control policy

separations of duty

least privilege

need to know

compartmentization

Security Domain

do not slow operations

select importance

users skills

help to establish owner of the information

increase confidentiality, integrity and availability

understanding the value of information

classify informations

public

internal use only

confidential

Restricted

labeling and marking

information assurance

employes, business partners

all'interno della company ( price list ,customer list)

important : payroll, health record, techincal design

estreme important !: merger acquisition

backup tabe labeled with “confidential”

monitor the classification program with audit

reliability = affidabilità

transparency

scalability

integrity

phisical reliability ( durata)

logical reliability

the system must be trasparent as possible to the user

assume that the system will grow up

double comma rule

system perform accurately

administrative controls = rules, responsability, policies

tecnical controls = hardware and software solutions

physical controls = lock, gates , guards

directive

deterrent

preventive

compensating

recovery